[Dreamwalker]

Hey people,

OK, social engineering is probably my main focus in hacking, why? because their is no cure for human stupidity. Anyway, to stop my rambling this is basically my last social engineer I did and I'm in a kind mood so I figured I would share - in a nutshell here's what happened. I had a target website, and just take my word for it, when I tell you this was a highly secure profile target, it was. I got into some low end systems for the company which was separate from the web server, but without explaining why I needed to get into their web server.

I was speaking to a friend, and we discussed different possibilities, and the idea was, I create a site and replicate my target but tweaking things, specifically the login section so I could capture details which gave me access to the files I needed, but, here's the thing. I was to change my targets domain name system records to point to MY new IP for the site I was hosting, so, the target site would redirect to mine! make sense? simple, I redirect the target to point to my domain by changing the two NS A records.

So, to do this, I got on the whois information amongst other things, I rang the target company claiming to be there webhost provider (as their site was hosted by someone externally) and, using the information I got from information gathering, convinced them, and got them to quote me all the information I needed in order to get the domain repointed over the phone with the web host (ie; account number, last bill date, registration etc). Then, I rang the targets website host provider pretending to be them, give them my account num and all the other information I gained and got them to repoint the A addresses in the names systems to point to my IP/site, it worked!!! about 24 hours later, the target site re-directed to mine, and within 3 days of action (before it got fixed) I got ALL the info I needed, included 48 highly secure logins which got me the data I needed.

[ch3rn0byl]

Thank you for the information Dreamwalker. This is Special Agent K with the Federal Bureau of Investigation.
I see you are gloating about getting into this "high profile" website. I'm going to arrest you now

Haha!! Now wouldn't that suck if you got a message or a phone call or a knock on the door like that??? haha I'm sure this
target isn't that...high profile, otherwise you wouldn't be coming here unless you are just THAT badass! Nevertheless, that is
pretty sweet! Awesome job though!

[xevenofhearts]

And this is why my love for Social Engineering is so strong. Thumbs up.

[unnamed]

I would have been limited to the "Thanks" button but this thread is too good to not bring it up on the Daily posts.
"Well Played".

[The Real Slim Shady]

Awww snap. Listen up people last night i posted a response ripping this guys story apart. This morning, my response has been deleted and his post has been edited to "fix" all the discrepancies. Now im not gonna rewrite all 3 paragraphs disecting each section again... but i will post the google cache screenshot of this guys original post and you can compare the differences and give a short overview. Mainly in his original post he doesnt actually know how DNS works or what information actually needed to be updated to perform this. for example, you wouldnt point an A record to a domain (that he specifically says is new).

And his new post still doesnt state how he was able to get 48 secure logins to the servers root, like he said was his goal. Most websites dont use the same passwords for their web apps as they do the server root and certainly is there rarely 48 people with access to a singles sites web sites files. That many people dont need access so it wouldnt really be 'secure' for that many people to have access, like he claims. Not only that but as soon as the hack was detected which is likely soon after people couldnt log in there would have been a security audit. Passwords would have been changed. Not to mention that the passwords he obtained would have been useless until after the attack and the dns information reverted back to the correct data but by that time his attack would have been discovered.

Spoiler:

Oh and i took a screenshot of this post/thread this time.

[gooore]

Ha ah nice debunk Geoff. Thought this was a cool idea until reading your post

[Dreamwalker]

What a surprise, OK I did edit it due to some "slight" wrong wording but everything I did was fact and their is nothing to "debunk", furthermore, I actually replied to your post and disproved everything you said. But the mods deleted mine and his post.


Please close this thread.